Advisories for Golang/Code.vikunja.io/Api package

The task preview component creates a unparented div. The div's innerHtml is set to the unescaped description of the task